Privacy

Last updated: October 2026. The German version is authoritative.

Controller

Kevin Zwimpfer, Gartenstrasse 11, 8700 Küsnacht, Switzerland
Email: kontakt [at] highnoonduell.com

This policy follows the Swiss Federal Act on Data Protection (FADP) and, for visitors from the EU, the General Data Protection Regulation (GDPR).

What is stored

Without an account: nothing on the server. Your best time and any unsaved run are kept only in your browser's local storage.
With an account: your player name, a salted hash of your password (never the password itself), your runs and won duels (points, hit zones, reaction times, shots) and statistics calculated from them. No email address, no real name.
Against real players: your won duels (player name, reaction time, hit zone) are shown to other players as opponents.
Challenges: your three rounds and the results of those who accept them, including the name they enter. Anyone with the link can see your player name and times.
Login: a technically necessary session cookie (hnd_s), valid for 30 days. The server only stores a hash of it. No advertising or tracking cookies.
Abuse protection: failed logins are counted per name, registrations and guest results per hashed IP address, for a short time, and then overwritten.
Live duels: room code, chosen character and duel results are processed only while the room exists.

Purpose and legal basis

The data is used only to provide the game, your account, the leaderboard and the duels, and to protect the site against abuse (GDPR Art. 6(1)(b) and (f)). There is no tracking and no sharing for advertising.

Hosting and transfer abroad

The website and database run on Cloudflare, Inc. (USA) in its global network. When you visit, Cloudflare processes technically necessary connection data such as IP address, time and browser. Cloudflare is certified under the Swiss-U.S. and EU-U.S. Data Privacy Framework. Fonts are loaded from this website itself, not from Google.

Retention and deletion

Account data is kept until you delete your account. You can do that yourself at any time under Account. Name, password hash, runs, duels, challenges and statistics are removed immediately.

Your rights

You can request information about your data, have it corrected or deleted, and object to its processing. Just write to the email address above. You can also complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, from the EU, to your data protection authority.